AT &T is notifying 51 million current and former customers of a data breachthat led to their personal information on hacking forums. However, the company has not provided details about how the data was obtained.
These alerts are related to the recent leak of a massive amount of AT&T customer data, which was originally offered for sale for $1 million in 2021.
When the ShinyHunters group first leaked AT&T data in 2021, the company said the data did not belong to them and that their systems had not been compromised. Last month, another threat actor known as “ MajorNelson ” leaked the same set of data to hacking forums, and AT&T again said the data did not come from them.
See also: US: Investigating allegations of leaking government documents
However, outside analysts confirmed that much of the data that was exposed included customer data and passwords. The company eventually admitted that the data belonged to it. And while the data breach contained information for more than 70 million people, AT&T now says it affected a total of 51,226,382 customers.
“The exposed information varied by individual and account, but may have included full name, email address, mailing address, phone number, social security number, date of birth, account , and AT&T password,” the alert states.
“As far as we know, personal financial information and call history were not affected. Based on our research to date, the data appears to be from June 2019 or earlier.“.
AT&T reportedly told BleepingComputer that this large difference in the number of affected users is because some customers had multiple accounts that were compromised in this data breach, so the final number of users affected is smaller.
As we mentioned, the company has not disclosed how the data. Additionally, it reportedly told the Maine Attorney General's Office that it learned of the breach on March 26, 2024. However, the information was originally exposed in 2021.
See also: 61% of Data Leaks in 2023 Were Related to Malware
Following the disclosure of the data breach, AT&T is offering customers theft protection identity and credit monitoring services for one year through Experian.
Affected individuals should be vigilant, monitor their accounts for suspicious activity, and be cautious of emails, texts, and phone calls they may receive.
The data breach and delayed response have led to multiple class-action lawsuits against AT&T. The data was stolen in 2021, giving cybercriminals ample opportunity to exploit it and launch targeted attacks. However, the entire data set has been leaked again, increasing the risk to customers.
The first and most immediate risk for users is the violation of their privacy. Their personal data, such as name, address, phone or email, has been leaked and can be used for illegal purposes.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
See also: OWASP reveals it suffered a data breach
Secondly, there is the risk of identity theft. This means that attackers may use their personal data to create fake profiles or pretend to be them, which can lead to further fraud.
Finally, the AT&T data breach could increase the risk of phishing attacks. Attackers could use the data they have obtained to send personalized messages, trying to gain access to further information, such as passwords or credit card information.
Source: www.bleepingcomputer.com
